Managing personal Outlook.com account settings, security, and privacy
Check these signs before trusting the email:
- Verify the sender domain.
- Emails from the Microsoft account team that use @accountprotection.microsoft.com are legitimate for Microsoft account notifications such as security codes and account update information.
- Microsoft support emails may also come from these domains: microsoft.com, microsoftsupport.com, mail.support.microsoft.com, office365support.com, and techsupport.microsoft.com.
- If the message comes from a different domain, treat it as suspicious.
- Confirm the message matches actual account activity.
- Make sure the account referenced in the email belongs to the Microsoft account in use.
- If the email asks for a verification code or account verification that was not requested, that can mean someone tried to access the account or entered the wrong email address.
- Inspect the message carefully in Outlook.
- A '?' on the sender image means Outlook could not verify the sender identity.
- A via tag can indicate the actual sending domain is different from the From address shown.
- Hover over the sender name or address to see the real email address before interacting with the message.
- Do not click links or open attachments if anything looks off.
- Instead, verify the account directly through Microsoft.
- If prompted to verify an Outlook.com account when sending mail, the official verification flow is through Microsoft’s verify page.
- If there is an unusual activity alert, review recent account activity directly.
- The recent activity page can show when and where the account was accessed, including successful sign-ins and security challenges.
A message is more likely authentic if it comes from @accountprotection.microsoft.com and matches a real action on the account. If it does not match account activity or comes from another domain, treat it as phishing.
References:
- Can I trust email from the Microsoft account team? | Microsoft Support
- How to determine if an email from Microsoft support is genuine
- How to verify your Outlook.com account | Microsoft Support
- Phishing and suspicious behavior in Outlook | Microsoft Support
- Help protect your Outlook.com email account | Microsoft Support